Database Addon for Contact Form 7 – CFDB7

Database Addon for Contact Form 7 – CFDB7 has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 7 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2021 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (29%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 7 issues recorded for Database Addon for Contact Form 7 – CFDB7 has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by R3N0. Database Addon for Contact Form 7 – CFDB7 is installed on roughly 600,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
7.0/ 10
Patch Coverage100%
Open

0

Fixed

7

Get automatic notifications for all Database Addon for Contact Form 7 – CFDB7 vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-24144

Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection

Read the full analysis

Vulnerability Records

7 records
Database Addon for Contact Form 7 – CFDB7 banner
Latestv1.4.0

Database Addon for Contact Form 7 – CFDB7

Arshid

Author

Arshid

5.0(1,875)
100/100
Last Updated
2026-08-20 (24d ago)
Active Installs
600,000+
Downloads
8,911,153
Requires WP
4.8+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2017-03-18 (10y ago)

The “CFDB7” plugin saves contact form 7 submissions to your WordPress database. Export the data to a CSV file. By simply installing the plugin, it will automatically begin to capture form submissions from contact form 7. Features of CFDB 7 No configuration is needed Save Contact Form 7 form submitted data to the database. Single database table for all contact form 7 forms Easy to use and lightweight plugin Developer friendly & easy to customize Display all created contact form 7 form list. Export CF7 DB (CF7 Database – cf7db) data in CSV file Form Email Testing Tool MailMug – SMTP Sandbox Plugins PostBox Email Log WP mail smtp Pro Addons Entry Automation Automatically export CFDB7 form entries to CSV on a schedule Advanced MYSQL DB Separate MySQL column for each cf7 input field Excel Spreadsheet (XLSX) Extension Connect CFDB7 to an external database or another DB Drag & Drop File Upload Contact form 7 drag and drop files upload plugin. Already Submitted? Trigger error if a field is already submitted Popup Message Replace your validation and success messages with beautiful popup messages to attract visitors. Export PDF File Easy to export contact forms from database to PDF file Import CSV to Database Import data from the CSV file to the CFDB7 database Support : http://www.ciphercoin.com/contact/ Extensions : Contact form 7 more Add-ons

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C